Windows 10: Where does MECM console list unhealthy Defender for Endpoint clients

I am planning the deployment of Defender for Endpoint Plan 1 clients across our enterprise. I would prefer using MECM, because we don’t have our Win10 endpoints enrolled in InTune. We need to manage the clients after they are deployed. The article https://docs.microsoft.com/en-us/mem/configmgr/protect/deploy-use/defender-advanced-threat-protection#monitor says that to Monitor clients using MECM, go to the dashboard at Monitoring > Security > Microsoft Defender ATP Status. At that page I see a piechart for Microsoft Defender ATP Agent Health, which shows percentage of clients t

:)

 

Master List of Windows 10 version 1803 connection endpoints

Read more: Windows 10, version 1803, connection endpoints for non-Enterprise editions | Microsoft Docs

 

Master List of Windows 10 version 1803 connection endpoints

Read more: Windows 10, version 1803, connection endpoints for non-Enterprise editions | Microsoft Docs

 

Defender antimalware client update

Bru,

Sorry I confused things then.

I found another thread of yours [Scheduled Defender Scan Does Not Run] that indicates that you set up the Scanning task on each computer using the TenForums tutorial Schedule Scan in Windows Defender Antivirus.

• That being the case, you'll have the tasks' various properties [General, Triggers, Actions, Conditions, Settings] set up the same way on each computer. If all the computers are at Ver 1709 then I expect the Action tab to show

C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MpCmdRun.exe Scan -ScheduleJob -ScanTrigger 55but the '55' can vary.

• Might I suggest that you click on All tasks history [on the right-hand side of the Task scheduler window] so that Task scheduler collects records of scanning attempts

• Can you describe the differing behaviour of each computer's task
  • 1 in terms of the symptoms you see as a user, and
  • 2 as they appear in each task's History tab [note that you will have to double-click on each task as if you were going to edit it just in order to adjust the column widths of the History tab entries so you can see them properly - it's a real pain because you'll have to do the same again the next time you want to look at the History], and
  • 3 as they appear in the Windows Defender log at

%UserProfile%\AppData\Local\Temp\MpCmdRun.log {you can just paste the whole path & filename into File explorer to get straight there}.
Denis